CVE-2021-22962: Ivanti Avalanche

Critical severity, CVSS 9.1. EPSS: 91% chance of exploitation in the next 30 days.

An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack.

Affected products

• Ivanti Avalanche: before 6.4.2 (fixed in 6.4.2)

Published 2023-12-19. Last modified 2026-06-17.